Configure FortiGate SDWAN in vdom mode

[63953]

Hello Everyone,

Anyone can share with me the guidelines on how to configure SDWAN in VDOM?  and limitation feature when FortiGate firewalls enable vdom mode?

Best Regards

Thanks

[kcheng · Accepted solution]

Hi @63953

Yes, technically there are no limitation of feature and function on the firewall. The only difference is that some settings are not available in the respective VDOM, but will be configurable on the global VDOM.

Configuration for SDWAN would be the same. 

[kcheng]

Hi @63953 

Configuring SDWAN with VDOM has no difference compared to configuring SDWAN without VDOM. To enable or configure VDOM, you can refer to the following document:

https://docs.fortinet.com/document/fortigate/7.4.1/administration-guide/32293/general-configurations

Configuration of SDWAN would has no difference:

https://docs.fortinet.com/document/fortigate/7.4.1/administration-guide/889544/sd-wan-quick-start

What would be the key consideration are in fact the traffic flow. That said, whether the traffic would take place only in the respective VDOM only or will there be any intervdom traffic involve. If there are intervdom traffic required, you will need to plan out the respective with intervdom link:

https://docs.fortinet.com/document/fortigate/7.4.1/administration-guide/335646/inter-vdom-routing-co...

There isn't any known limitation of enabling VDOM on FortiGate. It allows you to virtually divide the FortiGate into individual VDOM as if you are having multiple FortiGates. However, you will want to consider the number of VDOMs as most FortiGate units support 10 VDOMs by default. In short, if you have a proper network planning and design, there shouldn't be any limitation.

[63953]

meant that when we enable VDOM on fortigate firewall, there is no limitation on some feature or function on the firewall?

and other things, when enabling VDOM on the firewall. The configuration of SDWAN in vdom mode is the same as a firewall without running vdom. correct?

[kcheng · Accepted solution]

Hi @63953

Yes, technically there are no limitation of feature and function on the firewall. The only difference is that some settings are not available in the respective VDOM, but will be configurable on the global VDOM.

Configuration for SDWAN would be the same. 

[63953 · Accepted solution]

Thank you for your reply with the detailed explanation.